Sous-traitants ultérieurs
Chaque tiers qui traite des données pour notre compte, et ce que chacun reçoit.
Ces politiques sont publiées en anglais. Le texte anglais fait foi ; les traductions sont fournies à titre indicatif.
Dernière mise à jour: 2026-08-01
Les informations d'immatriculation de la société exploitant ce service ne sont pas encore publiées. Elles apparaîtront ici et dans le pied de page dès leur confirmation.
These are the third parties that receive data as part of running ShelfTap. We notify account holders by email before adding a new sub-processor that handles personal data.
Product and infrastructure
| Sub-processor | Purpose | What it receives |
|---|---|---|
| [HOSTING PROVIDER AND REGION — TO BE SUPPLIED] | Virtual private server hosting the application and database | All application data at rest and in transit |
| Google LLC — Gemini API | Company classification, tag generation and the in-app assistant | Search terms, company names, and public page text collected for a search |
| Cloudflare, Inc. — Workers | Reverse proxy in front of the Gemini API | The same request payloads, in transit |
| xAI — Grok API (search backend) | Product profiling and company reasoning | Search terms and public page text |
| Serper.dev (search backend) | Web, maps and news search lookups | Generated search queries only |
Account, payment and communication
| Sub-processor | Purpose | What it receives |
|---|---|---|
| NOWPayments | Cryptocurrency checkout and payment status callbacks | Order id, amount, plan and the email address associated with the order |
| Google LLC — OAuth "Sign in with Google" | Optional social login | Your Google account identifier, name, email and profile picture URL, only if you choose it |
| Google LLC — reCAPTCHA v3 | Bot protection on public forms | Your IP address and interaction signals |
| Google LLC — Analytics | Usage measurement | Pseudonymous usage events — only if you accept analytics cookies |
| Google LLC — Gmail SMTP relay | Transactional email (verification, password reset, contact replies) | Recipient address and message content |
| Telegram Messenger | Internal operational alerts to the operators | Service health messages; no customer personal data is sent deliberately |
Static assets
Pages load fonts and icon CSS from Google Fonts, jsDelivr and cdnjs. Those providers see your IP address and user-agent as a consequence of serving the file. They receive no account data.